Skill UI

Scans your codebase with pattern matching and entropy analysis to detect exposed secrets like API keys, passwords, and private keys, then generates remediation reports so you can fix vulnerabilities before committing or deploying code.

Automatically runs the vulnerability-scanner plugin to inspect code, dependencies, and configurations, detecting CVEs and insecure settings before releases and delivering detailed reports with remediation guidance.

Guide to mastering essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless checks, and compliance reporting, covering selection, configuration, and practical workflows.

Master advanced web animation techniques to transform standard websites into narrative, cinematic experiences. This guide covers scroll-triggered animations, parallax storytelling, sticky sections, and horizontal scrolling using industry-leading tools like GSAP and Framer Motion. Essential for creating highly engaging, performance-optimized web portfolios and product sites.

Runs external LLM CLIs (OpenAI Codex or Google Gemini) to review uncommitted changes, branch diffs, or specific commits, providing an independent second opinion before merges or releases.

Secret Scanner Assistant auto-activates within Security Fundamentals to guide you on secret detection, authentication, validation, secure coding, and vulnerability checks with best practices.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

Security workflow that guides from threat modeling through secure design, authentication and input validation, header hardening, encryption, and OWASP defenses for production services.

Walks through Trail of Bits’ five-step secure smart-contract workflow, running Slither and special feature checks, generating visual diagrams, documenting security properties, and flagging manual risks with an action plan.

A comprehensive, multi-phase workflow designed for conducting deep security audits across modern web applications and APIs. This bundle guides users through the entire security lifecycle, including reconnaissance, vulnerability scanning (SAST/DAST), specific testing for OWASP Top 10 and injection flaws, specialized API fuzzing, full-scope penetration testing, security hardening, and final risk reporting. Ideal for compliance checks and proactive security enhancement.

This skill simulates an expert cybersecurity auditor specializing in DevSecOps methodologies and comprehensive security assurance. It guides users through running detailed security audits, performing threat modeling, and assessing vulnerabilities (e.g., IDOR). Capabilities cover SAST, DAST, cloud security posture, zero-trust architectures, and compliance adherence to major frameworks like GDPR, HIPAA, and PCI-DSS, ensuring security is integrated throughout the entire SDLC.

Automates security benchmark runner workflows by triggering on relevant terminology, guiding pen testing/compliance tasks, generating production-ready configs, and validating outputs against industry standards within advanced enterprise security scenarios.